CVE-2022-24883

🗓️ 26 Apr 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 99 Views

CVE-2022-24883 FreeRDP version 2.7.0 and prior allows successful server side authentication for invalid credentials due to misconfigured SAM file path. Affected RDP server implementations using FreeRDP for authentication. Workaround: use custom authentication via HashCallback or ensure valid SAM database path

Reporter	Title	Published	Views	Family All 89
ALT Linux	Security fix for the ALT Linux 10 package freerdp version 2.7.0-alt1	27 Apr 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package freerdp version 2.7.0-alt1	25 Apr 202200:00	–	altlinux
AlpineLinux	CVE-2022-24883	26 Apr 202216:15	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в freerdp2	20 May 202605:53	–	astralinux
Circl	CVE-2022-24883	26 Apr 202220:37	–	circl
CNNVD	FreeRDP授权问题漏洞	26 Apr 202200:00	–	cnnvd
Cvelist	CVE-2022-24883 FreeRDP Server authentication might allow invalid credentials to pass	26 Apr 202200:00	–	cvelist
Debian	[SECURITY] [DLA 3654-1] freerdp2 security update	17 Nov 202317:35	–	debian
Debian	[SECURITY] [DLA 4053-1] freerdp2 security update	15 Feb 202517:38	–	debian
Debian CVE	CVE-2022-24883	26 Apr 202200:00	–	debiancve

NVD

Vulners

Node

freerdp freerdpRange<2.7.0

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

[
  {
    "vendor": "FreeRDP",
    "product": "FreeRDP",
    "versions": [
      {
        "version": "< 2.7.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/FreeRDP/FreeRDP/commit/6f473b273a4b6f0cb6aca32b95e22fd0de88e144
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/
github	www.github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qxm3-v2r6-vmwf
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL/
github	www.github.com/FreeRDP/FreeRDP/releases/tag/2.7.0
lists	www.lists.debian.org/debian-lts-announce/2023/11/msg00010.html
github	www.github.com/FreeRDP/FreeRDP/commit/4661492e5a617199457c8074bad22f766a116cdc
security	www.security.gentoo.org/glsa/202210-24
lists	www.lists.debian.org/debian-lts-announce/2025/02/msg00016.html

03 Nov 2025 21:15Current

8.7High risk

Vulners AI Score8.7

CVSS 26.8

CVSS 3.17.4 - 9.8

EPSS0.01266

SSVC

CWE-287